Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cogent_datahub | Cogentdatahub | * | 7.3.4 (including) |
Cogent_datahub | Cogentdatahub | 7.0 (including) | 7.0 (including) |
Cogent_datahub | Cogentdatahub | 7.0.2 (including) | 7.0.2 (including) |
Cogent_datahub | Cogentdatahub | 7.1.0 (including) | 7.1.0 (including) |
Cogent_datahub | Cogentdatahub | 7.1.1 (including) | 7.1.1 (including) |
Cogent_datahub | Cogentdatahub | 7.1.1.63 (including) | 7.1.1.63 (including) |
Cogent_datahub | Cogentdatahub | 7.1.2 (including) | 7.1.2 (including) |
Cogent_datahub | Cogentdatahub | 7.2.2 (including) | 7.2.2 (including) |
Cogent_datahub | Cogentdatahub | 7.3.0 (including) | 7.3.0 (including) |
Cogent_datahub | Cogentdatahub | 7.3.1 (including) | 7.3.1 (including) |
Cogent_datahub | Cogentdatahub | 7.3.2 (including) | 7.3.2 (including) |
Cogent_datahub | Cogentdatahub | 7.3.3 (including) | 7.3.3 (including) |